The California Consumer Privacy Act, expanded by the CPRA, gives California residents rights over personal information: to know what is collected, to delete it, to correct it and to opt out of its sale or sharing. It applies to businesses over certain thresholds that handle Californians’ data, wherever the business sits.
Workplace systems hold employee and visitor data, so CCPA reaches them: visitor logs, booking histories and attendance records about California residents all count. The practical requirements echo GDPR: know what you hold, why, for how long, and be able to answer when someone exercises their rights.